General
-
Target
2756-227-0x0000000000110000-0x000000000012E000-memory.dmp
-
Size
120KB
-
MD5
c4f5e4748a58b839a135e4fc70e15d0c
-
SHA1
46db3400ccc8676c7dcc4e42aae496c3a1f145f6
-
SHA256
f68572e5063a9cb8cbcd9d2c11f8f9ca987ad255f024fa1a3fed659505da639b
-
SHA512
0165838df05c866d4086b2c604c598a697ff3b9129d11ee3380ef7a05cfb1321f3993824a7c7ba830dee39a358b2b3c3b4f855feedd3564927f5f5a9225fea3f
-
SSDEEP
1536:Eqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6p3l:Ct1FYH+zi0ZbYe1g0ujyzde3
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2756-227-0x0000000000110000-0x000000000012E000-memory.dmp
Headers
Sections